Public users start with a sanitized workbook so nobody has to send private records just to understand the product.

Live trackers, exports, and room photos belong behind approved access.

Real facility data should move under mutual confidentiality before review starts.

Operator teams do not manage API keys. Provider access stays with VIXAR admin or the approved customer owner.

Customer evidence should be used for the durability review and agreed review work, not for unrelated reuse.

VIXAR shows the pressure points. Your team still owns the release, validation, regulatory, and inspection decision.